Codex CLI sandbox modes: read-only, workspace-write, and when each is right

Codex is the one terminal agent whose sandbox the kernel enforces — Apple Seatbelt on macOS, bubblewrap plus seccomp on Linux (Landlock is now the legacy path).